last executing test programs: 6.627693304s ago: executing program 0: timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_gettime(0x0, 0x0) 6.556829285s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept4$inet(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) 6.424300386s ago: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) 6.310079504s ago: executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r1, 0x0) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x10) r2 = accept4$inet6(r1, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x5451, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) 5.415762182s ago: executing program 0: futex(&(0x7f0000000700)=0x2, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") 2.442125202s ago: executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @dev, {[@cipso={0x86, 0x27, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0x10, "9606053d0006ff00800000b61af9"}]}, @lsrr={0x83, 0x13, 0x0, [@loopback, @loopback, @loopback, @multicast2]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) 2.415582227s ago: executing program 2: ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@deltclass={0x24, 0x29, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf}}}, 0x24}}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) 2.382242581s ago: executing program 2: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) writev(0xffffffffffffffff, &(0x7f0000002700), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 2.344308388s ago: executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, &(0x7f0000000240)={0x0, 0x0, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2}]}}) 1.817429019s ago: executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x862b01) syz_usb_connect$uac1(0x0, 0x84, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x72, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@extension_unit={0xb, 0x24, 0x8, 0x0, 0x0, 0x0, "954872c2"}, @processing_unit={0x8, 0x24, 0x7, 0x0, 0x0, 0x0, "f0"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 1.666013822s ago: executing program 0: r0 = syz_open_dev$hidraw(0x0, 0x46b, 0x8c02) syz_usb_connect(0x0, 0x36, &(0x7f0000001080)=ANY=[@ANYBLOB="120100004ba1f040031810551b7c0102030109022400010000d00009040000029f1cd40009050200ff03000000090501", @ANYRESOCT, @ANYRES16, @ANYRES64=0x0], 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) 1.498303769s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x13, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1f000000}, @generic={0x2c}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x609, 0xe, 0xd, &(0x7f0000000140)="dd80000000000000000400000000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.451867505s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fadc00000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.414073591s ago: executing program 1: openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) 1.381866526s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) socket$igmp(0x2, 0x3, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYRES8=r1], 0xcc}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012dbd7000fedbdf250300000005001200050000000c08090002000004000000000000120003000000050012000900000007a2456b654fb3e23c96b85465fcdfca5ea4524b729984e742ac1fa8bff36a049d8811ccd82cb82f4ec021898b48a8d205b157a8914930cdf9741afb460083f71c5074bf7bc56e77b297384f5ceecece4464b07ddff13ed2e55a7906538a970aec7710c38d3119e38bc92ea6fcb1a67dad1cf34551fd"], 0x38}, 0x1, 0x0, 0x0, 0x1c7cf478d7a100a3}, 0x80) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0x5, &(0x7f00000006c0)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "544e6b24af869c8bcb343306faffffffff155fadb01fcc19dccce863bc600e4d", 0x0, 0x80000000}, 0x3c) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 1.335763393s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x3}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 1.29011146s ago: executing program 3: socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x20000) unshare(0x22020400) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x503}, 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) sendmsg$nl_route(r1, 0x0, 0x20048810) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f00000001c0), 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 1.246819167s ago: executing program 2: futex(&(0x7f0000000700)=0x2, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") 1.191821646s ago: executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) mlockall(0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup3(r2, r1, 0x0) accept(r3, 0x0, 0x0) 1.145841813s ago: executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @dev, {[@cipso={0x86, 0x27, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0x10, "9606053d0006ff00800000b61af9"}]}, @lsrr={0x83, 0x13, 0x0, [@loopback, @loopback, @loopback, @multicast2]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) 1.106709169s ago: executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040), 0x10) connect$inet(r1, &(0x7f0000000000), 0x10) sendto$inet(r1, &(0x7f0000000080)="0c0100000010005d41a915cc545747116bd4d8e60c1f877d030140d82e0a7414bc4cb184d63a1135817b0d47e3813c6e2ffec6984bc59868c783b2acf0d0672eaa2f290dbfa845abbdda4d7baf85146e70850833fb771d960aa19603000e5da70a13b6d0552dc96f", 0xfe86, 0xe, 0x0, 0x0) fcntl$lock(r0, 0xa, 0x0) 745.636275ms ago: executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x5, [{{0x2, 0x0, @loopback}}, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @loopback}}]}, 0x310) 678.034795ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) sendfile(r2, r1, 0x0, 0x400000006) 580.480631ms ago: executing program 4: socket$inet6(0xa, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01050000000000000000020000000c00040000000000000000000c0002000000000000000000040007800c0008000000000000000000080001"], 0x90}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x1f) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000823423e7fc1000", @ANYRES16=r4, @ANYBLOB="010000000000000000001500000008002c000000", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000880)={&(0x7f0000000540), 0xc, &(0x7f0000000840)={&(0x7f0000000b00)=ANY=[@ANYBLOB="00f7ff00d015ef9b50c9bf3c1278d656a58a8fb5f94a87ad1f1c2fab21e2462b3fa3413de6bebe2fcfe52398677adb11d07b959a8233914045418336ed97876062583800d5e1ddea42a6222b69c421c7ef48b728f0bf365423054f1d1b070452fab671f598371c2b82575b7d978622016e49a752eaede416a4a197b5a25f56b33242cd0f5548b78e7e4006b3038692b3be7a6d02f0633901892b92ebb15c0996614dd59f5ce3b5ae0000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf251d0000000800", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="44002f800c0002000203aaaaaaaaaaaa0c000200a59c652a062f50c90c0002000201aaaaaaaaaaaa0800010000", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB], 0x78}}, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f00000003c0)={{0x2, 0x0, @empty}, {0x0, @local}, 0x0, {0x2, 0x4e20, @dev}, 'nr0\x00'}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x19, &(0x7f0000000f00)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r8], 0x20}}, 0x2004c110) 257.72717ms ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x2, 0x0, &(0x7f0000000100)) 241.782253ms ago: executing program 4: socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x20000) unshare(0x22020400) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x503}, 0x20}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) sendmsg$nl_route(r1, 0x0, 0x20048810) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f00000001c0), 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 192.163091ms ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000007300)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x0, @private0}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000480)="7f", 0x1}], 0x1}}], 0x1, 0x0) listen(r0, 0xfff) accept(r0, 0x0, &(0x7f0000000440)=0xffffffffffffffec) 118.399942ms ago: executing program 4: syz_emit_ethernet(0x7e, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @dev, {[@cipso={0x86, 0x27, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x4, "4eb8"}, {0x0, 0x10, "9606053d0006ff00800000b61af9"}]}, @lsrr={0x83, 0x13, 0x0, [@loopback, @loopback, @loopback, @multicast2]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) 40.171804ms ago: executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x2}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 0s ago: executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000000)=0x6) kernel console output (not intermixed with test programs): ready [ 41.888999][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.891960][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.896951][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.899997][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.902499][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.907189][ T3996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.913812][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.916562][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.925506][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.928050][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.933783][ T3992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.941220][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.944933][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.947382][ T3986] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.949189][ T3986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.954614][ T3993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 41.973781][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.976312][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.979044][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.981545][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.983385][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.994076][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 41.997030][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 41.999833][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.003135][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.041801][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.045108][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.047792][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.050500][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.053238][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.063327][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.066610][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.086417][ T4006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.089805][ T4006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.106074][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.108754][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.111411][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.127141][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.130098][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.132867][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.142564][ T4000] device veth0_vlan entered promiscuous mode [ 42.150193][ T4000] device veth1_vlan entered promiscuous mode [ 42.183990][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 42.189648][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.192272][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.201656][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.205641][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.208607][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.210769][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.214800][ T3996] device veth0_vlan entered promiscuous mode [ 42.221425][ T3996] device veth1_vlan entered promiscuous mode [ 42.230569][ T4040] Bluetooth: hci0: command 0x041b tx timeout [ 42.240941][ T3993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.260835][ T3992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.262960][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.271069][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.273999][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.276662][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.278745][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.280777][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 42.282806][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 42.292571][ T4040] Bluetooth: hci3: command 0x041b tx timeout [ 42.294983][ T4040] Bluetooth: hci1: command 0x041b tx timeout [ 42.296576][ T4040] Bluetooth: hci4: command 0x041b tx timeout [ 42.309265][ T4006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.314611][ T4000] device veth0_macvtap entered promiscuous mode [ 42.331939][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.335276][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.337925][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.347116][ T3996] device veth0_macvtap entered promiscuous mode [ 42.361392][ T4000] device veth1_macvtap entered promiscuous mode [ 42.364990][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.367521][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.370455][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.381161][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.383878][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.386561][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.391292][ T3996] device veth1_macvtap entered promiscuous mode [ 42.408362][ T4000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.419677][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.422393][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.432805][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.436434][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.439244][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.441915][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.459250][ T3996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.462218][ T3996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.473424][ T3996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.478364][ T4000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.484426][ T4000] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.486779][ T4000] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.489052][ T4000] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.491407][ T4000] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.501757][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.505710][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.508465][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.511061][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.514661][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.517363][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.520251][ T4006] device veth0_vlan entered promiscuous mode [ 42.544925][ T3996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.547601][ T3996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.551731][ T3996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.559377][ T4006] device veth1_vlan entered promiscuous mode [ 42.568164][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.571892][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.575035][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.577662][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.580362][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.582979][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.615279][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.618112][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.634013][ T3996] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.636258][ T3996] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.638431][ T3996] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.640670][ T3996] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.652347][ T3992] device veth0_vlan entered promiscuous mode [ 42.662207][ T4006] device veth0_macvtap entered promiscuous mode [ 42.667672][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.670476][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.673146][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 42.676893][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.679758][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.682539][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.686490][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.688908][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.691370][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.695829][ T3993] device veth0_vlan entered promiscuous mode [ 42.703001][ T3993] device veth1_vlan entered promiscuous mode [ 42.723396][ T4006] device veth1_macvtap entered promiscuous mode [ 42.734410][ T3992] device veth1_vlan entered promiscuous mode [ 42.804545][ T4006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.807259][ T4006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.809709][ T4006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.812543][ T4006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.822105][ T4006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.841518][ T3992] device veth0_macvtap entered promiscuous mode [ 42.852061][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.855379][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.855775][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.857511][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.859971][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 42.865554][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 42.868131][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.870647][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.873375][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.876816][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.879506][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.882249][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 42.886158][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 42.889095][ T4006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.891923][ T4006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.894699][ T4006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.897168][ T4006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.903053][ T4006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.909963][ T3992] device veth1_macvtap entered promiscuous mode [ 42.925385][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 42.927916][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.930853][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.952371][ T4006] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.955265][ T4006] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.957498][ T4006] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.959786][ T4006] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.984490][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 42.987322][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.001250][ T3993] device veth0_macvtap entered promiscuous mode [ 43.004314][ T408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.006430][ T408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.007384][ T3993] device veth1_macvtap entered promiscuous mode [ 43.017991][ T3992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.020789][ T3992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.023274][ T3992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.027911][ T3992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.030445][ T3992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.033307][ T3992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.038183][ T3992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.050595][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.053328][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.057901][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.060374][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.063153][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.076485][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.078537][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.083990][ T3992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.086672][ T3992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.089088][ T3992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.091800][ T3992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.098164][ T3992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.101003][ T3992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.105958][ T3992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.117477][ T3993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.117508][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.120121][ T3993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.120156][ T3993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.120171][ T3993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.129135][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.131567][ T3993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.136418][ T3993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.139048][ T3993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.141684][ T3993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.146870][ T3993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.149560][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.152325][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.155802][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.158523][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.161125][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.164753][ T4013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.173062][ T3992] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.176970][ T3992] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.179230][ T3992] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.181483][ T3992] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.188849][ T3993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.191702][ T3993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.195587][ T3993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.198252][ T3993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.200922][ T3993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.205381][ T3993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.207942][ T3993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.210522][ T3993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.215154][ T3993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.221532][ T3993] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.224430][ T3993] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.226734][ T3993] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.229050][ T3993] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.272956][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.276262][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.370588][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.372638][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.421967][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.484019][ T550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.486270][ T550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.495184][ T4040] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.497977][ T4077] mmap: syz-executor.2 (4077) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 43.502860][ T550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.514639][ T550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.522684][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.582622][ T408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.586036][ T408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.591610][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 43.611252][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.615734][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.621409][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.661233][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.667657][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.670298][ T4080] Zero length message leads to an empty skb [ 43.683949][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 43.832632][ T4091] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 44.263972][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 44.735932][ T4102] ieee802154 phy0 wpan0: encryption failed: -22 [ 46.683471][ C0] sched: RT throttling activated [ 46.688260][ T4074] Bluetooth: hci2: command 0x0419 tx timeout [ 46.720495][ T4041] Bluetooth: hci0: command 0x040f tx timeout [ 46.722429][ T4041] Bluetooth: hci4: command 0x040f tx timeout [ 46.725827][ T4041] Bluetooth: hci1: command 0x040f tx timeout [ 46.727518][ T4041] Bluetooth: hci3: command 0x040f tx timeout [ 46.749026][ T4091] team0: Port device wlan1 added [ 48.954551][ T4043] Bluetooth: hci3: command 0x0419 tx timeout [ 48.956153][ T4043] Bluetooth: hci1: command 0x0419 tx timeout [ 48.973713][ T4043] Bluetooth: hci4: command 0x0419 tx timeout [ 48.978883][ T4043] Bluetooth: hci0: command 0x0419 tx timeout [ 48.999865][ T4128] udc-core: couldn't find an available UDC or it's busy [ 49.054427][ T4128] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 49.110729][ T4130] loop1: detected capacity change from 0 to 1024 [ 49.118451][ T4113] loop4: detected capacity change from 0 to 32768 [ 49.124841][ T4132] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 49.152832][ T4130] hfsplus: failed to load root directory [ 49.158888][ T4113] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4113) [ 49.209014][ T4113] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 49.211498][ T4113] BTRFS info (device loop4): force zlib compression, level 3 [ 49.217993][ T4113] BTRFS info (device loop4): force clearing of disk cache [ 49.219798][ T4113] BTRFS info (device loop4): setting nodatasum [ 49.221313][ T4113] BTRFS info (device loop4): allowing degraded mounts [ 49.223125][ T4113] BTRFS info (device loop4): enabling disk space caching [ 49.234271][ T4113] BTRFS info (device loop4): disk space caching is enabled [ 49.236294][ T4113] BTRFS info (device loop4): has skinny extents [ 49.330583][ T4146] loop1: detected capacity change from 0 to 512 [ 49.407189][ T4113] BTRFS info (device loop4): clearing free space tree [ 49.409465][ T4113] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 49.413773][ T4146] EXT4-fs (loop1): Ignoring removed orlov option [ 49.415623][ T4146] EXT4-fs (loop1): Mount option "journal_async_commit" incompatible with ext3 [ 49.433890][ T4113] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 49.634241][ T4113] BTRFS info (device loop4): balance: start -s [ 49.645818][ T4158] ieee802154 phy0 wpan0: encryption failed: -22 [ 49.660732][ T4113] BTRFS info (device loop4): relocating block group 1048576 flags system [ 49.709132][ T4146] udc-core: couldn't find an available UDC or it's busy [ 49.735732][ T4146] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 49.809156][ T4113] BTRFS info (device loop4): balance: ended with status: 0 [ 50.461150][ T4179] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 50.590906][ T4179] team0: Port device wlan1 added [ 51.369776][ T4193] device batadv0 entered promiscuous mode [ 51.380012][ T4193] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 51.399075][ T4193] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 52.245023][ T148] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.260539][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 52.358544][ T148] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.456741][ T148] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.462001][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.465324][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.467927][ T4196] device bridge_slave_0 entered promiscuous mode [ 52.475123][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.479554][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.484379][ T4196] device bridge_slave_1 entered promiscuous mode [ 52.538663][ T148] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.551041][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.573896][ T4210] loop4: detected capacity change from 0 to 256 [ 52.585434][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.652999][ T4210] FAT-fs (loop4): Directory bread(block 64) failed [ 52.658620][ T4210] FAT-fs (loop4): Directory bread(block 65) failed [ 52.660488][ T4210] FAT-fs (loop4): Directory bread(block 66) failed [ 52.662131][ T4210] FAT-fs (loop4): Directory bread(block 67) failed [ 52.679441][ T4210] FAT-fs (loop4): Directory bread(block 68) failed [ 52.681341][ T4210] FAT-fs (loop4): Directory bread(block 69) failed [ 52.683199][ T4210] FAT-fs (loop4): Directory bread(block 70) failed [ 52.693659][ T4210] FAT-fs (loop4): Directory bread(block 71) failed [ 52.695428][ T4210] FAT-fs (loop4): Directory bread(block 72) failed [ 52.697116][ T4210] FAT-fs (loop4): Directory bread(block 73) failed [ 52.700906][ T4196] team0: Port device team_slave_0 added [ 52.705386][ T4196] team0: Port device team_slave_1 added [ 52.751425][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.753256][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.813517][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.955506][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.957539][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.997728][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.449581][ T4204] loop0: detected capacity change from 0 to 32768 [ 53.485682][ T4196] device hsr_slave_0 entered promiscuous mode [ 53.490840][ T4204] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4204) [ 53.524304][ T4196] device hsr_slave_1 entered promiscuous mode [ 53.550034][ T4204] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 53.552703][ T4204] BTRFS info (device loop0): force zlib compression, level 3 [ 53.563670][ T4204] BTRFS info (device loop0): force clearing of disk cache [ 53.565767][ T4204] BTRFS info (device loop0): setting nodatasum [ 53.583779][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.585849][ T4196] Cannot create hsr debugfs directory [ 53.597878][ T4204] BTRFS info (device loop0): allowing degraded mounts [ 53.599705][ T4204] BTRFS info (device loop0): enabling disk space caching [ 53.601703][ T4204] BTRFS info (device loop0): disk space caching is enabled [ 53.653821][ T4204] BTRFS info (device loop0): has skinny extents [ 53.703651][ T13] Bluetooth: hci5: command 0x0409 tx timeout [ 53.795800][ T4242] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 53.941401][ T4204] BTRFS info (device loop0): clearing free space tree [ 53.943235][ T4204] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 53.946061][ T4204] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 53.997125][ T4204] BTRFS info (device loop0): balance: start -s [ 53.999958][ T4204] BTRFS info (device loop0): relocating block group 1048576 flags system [ 54.003162][ T4259] loop1: detected capacity change from 0 to 256 [ 54.058343][ T4204] BTRFS info (device loop0): balance: ended with status: 0 [ 54.237307][ T4265] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 54.720277][ T4196] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.826031][ T4196] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.866837][ T4196] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.978930][ T4196] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.345004][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.436542][ T4298] loop1: detected capacity change from 0 to 16 [ 55.439094][ T4298] erofs: Unknown parameter '' [ 55.573591][ T148] device hsr_slave_0 left promiscuous mode [ 55.616312][ T148] device hsr_slave_1 left promiscuous mode [ 55.704845][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.706915][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 55.721995][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.733849][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.745665][ T148] device bridge_slave_1 left promiscuous mode [ 55.748359][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.917344][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 55.944671][ T148] device bridge_slave_0 left promiscuous mode [ 55.946388][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.021135][ T148] device batadv0 left promiscuous mode [ 56.104162][ T148] device veth1_macvtap left promiscuous mode [ 56.105963][ T148] device veth0_macvtap left promiscuous mode [ 56.107547][ T148] device veth1_vlan left promiscuous mode [ 56.109170][ T148] device veth0_vlan left promiscuous mode [ 56.580995][ T148] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 56.587735][ T4318] loop4: detected capacity change from 0 to 512 [ 56.859824][ T4318] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz-executor.4: inline data xattr refers to an external xattr inode [ 56.865094][ T4318] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 12 (err -117) [ 56.869219][ T4318] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000200000,user_xattr,grpjquota=,sysvgroups,prjquota,usrjquota=,usrjquota=,min_batch_time=0x000000000000409e,nodiscard,,errors=continue. Quota mode: writeback. [ 56.949161][ T26] audit: type=1326 audit(56.920:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4317 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b5c20e8 code=0x7ffc0000 [ 56.980738][ T26] audit: type=1326 audit(56.950:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4317 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8b5c20e8 code=0x7ffc0000 [ 56.990628][ T26] audit: type=1326 audit(56.960:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4317 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b5c20e8 code=0x7ffc0000 [ 57.053674][ T26] audit: type=1326 audit(56.960:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4317 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8b5c20e8 code=0x7ffc0000 [ 57.070979][ T26] audit: type=1326 audit(56.960:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4317 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b5c20e8 code=0x7ffc0000 [ 57.101904][ T26] audit: type=1326 audit(56.960:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4317 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8b5c20e8 code=0x7ffc0000 [ 57.128234][ T26] audit: type=1326 audit(56.960:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4317 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b5c20e8 code=0x7ffc0000 [ 57.144888][ T26] audit: type=1326 audit(56.960:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4317 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8b5c20e8 code=0x7ffc0000 [ 57.150305][ T26] audit: type=1326 audit(56.960:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4317 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b5c20e8 code=0x7ffc0000 [ 57.167031][ T148] team0 (unregistering): Port device team_slave_1 removed [ 57.173908][ T26] audit: type=1326 audit(56.960:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4317 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8b5c20e8 code=0x7ffc0000 [ 57.195609][ T148] team0 (unregistering): Port device team_slave_0 removed [ 57.210044][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.270428][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.568039][ T148] bond0 (unregistering): Released all slaves [ 57.706055][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.708562][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.727370][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.732750][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.735845][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.743983][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.746195][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.759004][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.761570][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.774218][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.780196][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.782114][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.806764][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.809699][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.812573][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.818269][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.843340][ T4196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.850127][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.859168][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.864210][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.867459][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.875670][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.883154][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.888405][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.896528][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.904596][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.943822][ T13] Bluetooth: hci5: command 0x040f tx timeout [ 58.314413][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.318299][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.320405][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.376747][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.379933][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.439096][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.441617][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.445023][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.447428][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.457211][ T4196] device veth0_vlan entered promiscuous mode [ 58.496773][ T4196] device veth1_vlan entered promiscuous mode [ 58.570224][ T4196] device veth0_macvtap entered promiscuous mode [ 58.599674][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.602470][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.612919][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.618453][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.624754][ T4196] device veth1_macvtap entered promiscuous mode [ 58.650326][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.652903][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.775382][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.782806][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.798427][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.801193][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.828529][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.851773][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.854773][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.857893][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.862741][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.878253][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.881463][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.916795][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.919761][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.922365][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.949564][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.952304][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.962461][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.965895][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.968953][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.974641][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.978646][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.982057][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.999025][ T4196] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.008639][ T4196] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.011060][ T4196] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.015138][ T4196] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.177153][ T283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.179355][ T283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.183101][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.239563][ T283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.241825][ T283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.246282][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.349489][ T4363] ieee802154 phy0 wpan0: encryption failed: -22 [ 60.786115][ T13] Bluetooth: hci5: command 0x0419 tx timeout [ 60.918583][ T4383] loop2: detected capacity change from 0 to 1024 [ 62.219947][ T4411] udc-core: couldn't find an available UDC or it's busy [ 62.221801][ T4411] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 63.423721][ T4436] device syzkaller0 entered promiscuous mode [ 64.115348][ T4463] device pim6reg1 entered promiscuous mode [ 64.671734][ T4472] device pim6reg1 entered promiscuous mode [ 64.783399][ T4474] €Â: renamed from pim6reg1 [ 69.627972][ T1975] cfg80211: failed to load regulatory.db [ 69.636339][ T2048] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.638154][ T2048] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.544055][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 71.714093][ T4559] chnl_net:caif_netlink_parms(): no params data found [ 72.051122][ T408] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.102772][ T408] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.136047][ T4559] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.138088][ T4559] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.140701][ T4559] device bridge_slave_0 entered promiscuous mode [ 72.156398][ T4559] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.158349][ T4559] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.160899][ T4559] device bridge_slave_1 entered promiscuous mode [ 72.210260][ T408] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.241968][ T4559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.255157][ T4559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.312181][ T408] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.351930][ T4559] team0: Port device team_slave_0 added [ 72.365321][ T4559] team0: Port device team_slave_1 added [ 72.408324][ T4559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.415041][ T4559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.438515][ T4559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.452405][ T4559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.458164][ T4559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.473254][ T4559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.646721][ T4559] device hsr_slave_0 entered promiscuous mode [ 72.663868][ T4559] device hsr_slave_1 entered promiscuous mode [ 72.703619][ T4559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.705648][ T4559] Cannot create hsr debugfs directory [ 73.023270][ T4596] futex_wake_op: syz-executor.4 tries to shift op by -1; fix this program [ 73.465134][ T4052] Bluetooth: hci3: command 0x0409 tx timeout [ 73.656187][ T4559] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.706249][ T4559] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.767099][ T4559] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.809986][ T4559] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.258444][ T4559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.277002][ T408] device hsr_slave_0 left promiscuous mode [ 74.295970][ T408] device hsr_slave_1 left promiscuous mode [ 74.373790][ T408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.375827][ T408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.385106][ T408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.387072][ T408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.406053][ T408] device bridge_slave_1 left promiscuous mode [ 74.410088][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.456311][ T408] device bridge_slave_0 left promiscuous mode [ 74.458133][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.590351][ T408] device veth1_macvtap left promiscuous mode [ 74.592103][ T408] device veth0_macvtap left promiscuous mode [ 74.594724][ T408] device veth1_vlan left promiscuous mode [ 74.596681][ T408] device veth0_vlan left promiscuous mode [ 74.869103][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 75.202370][ T408] team0 (unregistering): Port device team_slave_1 removed [ 75.247433][ T408] team0 (unregistering): Port device team_slave_0 removed [ 75.282316][ T408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.352931][ T408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.551196][ T1975] Bluetooth: hci3: command 0x041b tx timeout [ 75.580532][ T408] bond0 (unregistering): Released all slaves [ 75.701656][ T4559] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.706491][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.708960][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.727139][ T4651] device ipip0 entered promiscuous mode [ 75.747437][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 75.750064][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.752521][ T4052] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.754834][ T4052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.787813][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 75.790576][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.793048][ T4052] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.795098][ T4052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.825503][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 75.828066][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 75.851496][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 75.865497][ T4660] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 75.894534][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 75.897958][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.902678][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 75.926064][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.928942][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 75.931501][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.973274][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.012923][ T4559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.040403][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.045506][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.048567][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.330989][ T4674] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 76.355268][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.357361][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.409159][ T4559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.454733][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.457610][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.488399][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.491137][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.503113][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.516739][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.528434][ T4559] device veth0_vlan entered promiscuous mode [ 76.562682][ T4559] device veth1_vlan entered promiscuous mode [ 76.633301][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.638763][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.642446][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.657312][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.672122][ T4559] device veth0_macvtap entered promiscuous mode [ 76.687018][ T4559] device veth1_macvtap entered promiscuous mode [ 76.712499][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.720544][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.728771][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.732150][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.738563][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.742065][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.757513][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.765226][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.780618][ T4559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.783343][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.788772][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.794995][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.804761][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.815909][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.834865][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.841090][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.846981][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.850326][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.853420][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.861230][ T4559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.871979][ T4559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.906126][ T4559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.985220][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.987994][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.994033][ T4559] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.997620][ T4559] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.008124][ T4559] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.017786][ T4559] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.208208][ T4694] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.327257][ T1618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.329529][ T1618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.336687][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.376927][ T1618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.379250][ T1618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.380611][ T4698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.391828][ T1975] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.591666][ T4709] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 77.624538][ T1975] Bluetooth: hci3: command 0x040f tx timeout [ 77.781067][ T4718] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 77.923832][ T4722] bridge0: port 3(vlan2) entered blocking state [ 77.931666][ T4722] bridge0: port 3(vlan2) entered disabled state [ 77.936635][ T4722] device vlan2 entered promiscuous mode [ 77.938536][ T4722] bridge0: adding interface vlan2 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 78.260521][ T4745] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 78.691892][ T4766] udc-core: couldn't find an available UDC or it's busy [ 78.699663][ T4767] udc-core: couldn't find an available UDC or it's busy [ 78.702907][ T4766] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 78.708140][ T4767] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 79.706648][ T1953] Bluetooth: hci3: command 0x0419 tx timeout [ 79.726165][ T4808] Cannot find add_set index 0 as target [ 80.389664][ T4831] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. [ 80.683323][ T4838] dccp_close: ABORT with 60 bytes unread [ 80.706874][ T4831] infiniband A: set active [ 80.709586][ T4831] infiniband A: added bridge_slave_0 [ 80.865197][ T4831] RDS/IB: A: added [ 80.866649][ T4831] smc: adding ib device A with port count 1 [ 80.868413][ T4831] smc: ib device A port 1 has pnetid [ 80.911195][ T4855] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 80.950452][ T4857] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.066278][ T4869] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 81.091819][ T4872] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 81.096451][ T4872] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.746144][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 81.877448][ T4900] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.066366][ T4901] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 82.076802][ T4903] bridge0: port 3(vlan2) entered blocking state [ 82.078671][ T4903] bridge0: port 3(vlan2) entered disabled state [ 82.081426][ T4903] device vlan2 entered promiscuous mode [ 82.083222][ T4903] bridge0: adding interface vlan2 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 82.175556][ T4910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 82.356187][ T4920] udc-core: couldn't find an available UDC or it's busy [ 82.358016][ T4920] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 82.555715][ T4930] loop3: detected capacity change from 0 to 2048 [ 82.623749][ T4930] EXT4-fs (loop3): Unrecognized mount option "euid>00000000000000000000" or missing value [ 84.169116][ T4948] loop4: detected capacity change from 0 to 40427 [ 84.260164][ T4948] F2FS-fs (loop4): invalid crc value [ 84.310451][ T4948] F2FS-fs (loop4): Found nat_bits in checkpoint [ 84.372720][ T4948] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 84.409911][ T4948] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 84.503217][ T3992] attempt to access beyond end of device [ 84.503217][ T3992] loop4: rw=2049, want=40992, limit=40427 [ 84.907891][ T4964] udc-core: couldn't find an available UDC or it's busy [ 84.909685][ T4964] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 85.091092][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 85.091107][ T26] audit: type=1326 audit(85.060:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa49c70e8 code=0x7ffc0000 [ 85.123555][ T26] audit: type=1326 audit(85.060:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffa49c70e8 code=0x7ffc0000 [ 85.135102][ T26] audit: type=1326 audit(85.060:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa49c70e8 code=0x7ffc0000 [ 85.144012][ T26] audit: type=1326 audit(85.060:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffa49c70e8 code=0x7ffc0000 [ 85.149769][ T26] audit: type=1326 audit(85.060:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa49c70e8 code=0x7ffc0000 [ 85.164509][ T26] audit: type=1326 audit(85.060:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=206 compat=0 ip=0xffffa49c70e8 code=0x7ffc0000 [ 85.180600][ T26] audit: type=1326 audit(85.060:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa49c70e8 code=0x7ffc0000 [ 85.213031][ T26] audit: type=1326 audit(85.060:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4967 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa49c70e8 code=0x7ffc0000 [ 86.152567][ T4005] Bluetooth: hci5: sending frame failed (-49) [ 86.480682][ T4985] loop1: detected capacity change from 0 to 512 [ 86.515173][ T4985] ======================================================= [ 86.515173][ T4985] WARNING: The mand mount option has been deprecated and [ 86.515173][ T4985] and is ignored by this kernel. Remove the mand [ 86.515173][ T4985] option from the mount to silence this warning. [ 86.515173][ T4985] ======================================================= [ 86.583634][ T4985] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 86.593599][ T4985] EXT4-fs (loop1): orphan cleanup on readonly fs [ 86.608791][ T4985] EXT4-fs (loop1): 1 truncate cleaned up [ 86.672245][ T408] Quota error (device loop1): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 86.677658][ T408] EXT4-fs error (device loop1): ext4_release_dquot:6219: comm kworker/u4:4: Failed to release dquot type 1 [ 86.691726][ T4985] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,discard,barrier=0x0000000000000003,noinit_itable,noinit_itable,noauto_da_alloc,resgid=0x0000000000000000,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 86.946368][ T4966] loop4: detected capacity change from 0 to 131072 [ 86.989203][ T4966] F2FS-fs (loop4): invalid crc value [ 87.014829][ T4966] F2FS-fs (loop4): Found nat_bits in checkpoint [ 87.054711][ T4966] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 87.064285][ T4966] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 87.893068][ T5011] udc-core: couldn't find an available UDC or it's busy [ 87.897334][ T4999] loop3: detected capacity change from 0 to 40427 [ 87.899133][ T5011] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 87.938129][ T5012] ptrace attach of "/root/syz-executor.0 exec"[4006] was attempted by "/root/syz-executor.0 exec"[5012] [ 87.952202][ T4999] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 87.954734][ T4999] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 87.963959][ T4999] F2FS-fs (loop3): invalid crc value [ 87.982929][ T4999] F2FS-fs (loop3): Found nat_bits in checkpoint [ 88.008194][ T4999] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 88.010245][ T4999] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 88.184586][ T4041] Bluetooth: hci5: command 0x1003 tx timeout [ 88.188273][ T4005] Bluetooth: hci5: sending frame failed (-49) [ 89.180587][ T4000] attempt to access beyond end of device [ 89.180587][ T4000] loop3: rw=2049, want=45104, limit=40427 [ 89.465826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 90.273699][ T4040] Bluetooth: hci5: command 0x1001 tx timeout [ 90.275378][ T4005] Bluetooth: hci5: sending frame failed (-49) [ 90.388421][ T5042] loop3: detected capacity change from 0 to 512 [ 90.503660][ T5042] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.510095][ T5042] EXT4-fs (loop3): orphan cleanup on readonly fs [ 90.516637][ T5042] EXT4-fs (loop3): 1 truncate cleaned up [ 90.526505][ T408] Quota error (device loop3): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 90.529989][ T408] EXT4-fs error (device loop3): ext4_release_dquot:6219: comm kworker/u4:4: Failed to release dquot type 1 [ 90.536056][ T5042] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,discard,barrier=0x0000000000000003,noinit_itable,noinit_itable,noauto_da_alloc,resgid=0x0000000000000000,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 91.050678][ T5048] loop3: detected capacity change from 0 to 40427 [ 91.131625][ T5048] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 91.134067][ T5048] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 91.145407][ T5048] F2FS-fs (loop3): invalid crc value [ 91.174560][ T5048] F2FS-fs (loop3): Found nat_bits in checkpoint [ 91.220577][ T5048] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 91.222464][ T5048] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 92.756658][ T4041] Bluetooth: hci5: command 0x1009 tx timeout [ 92.827730][ T4000] attempt to access beyond end of device [ 92.827730][ T4000] loop3: rw=2049, want=45104, limit=40427 [ 98.038007][ T5115] udc-core: couldn't find an available UDC or it's busy [ 98.047614][ T5115] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 98.407806][ T5120] udc-core: couldn't find an available UDC or it's busy [ 98.409473][ T5120] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 98.561581][ T5122] loop0: detected capacity change from 0 to 512 [ 98.647049][ T5122] EXT4-fs (loop0): Ignoring removed bh option [ 98.668791][ T5122] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz-executor.0: inode #11614: comm syz-executor.0: iget: illegal inode # [ 98.701769][ T5122] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 11614 err=-117 [ 98.728492][ T5122] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 98.752475][ T5122] EXT4-fs (loop0): 1 truncate cleaned up [ 98.762556][ T5122] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,noinit_itable,debug_want_extra_isize=0x000000000000005e,barrier=0x0000000000000008,delalloc,noload,nojournal_checksum,,errors=continue. Quota mode: none. [ 100.154651][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 100.778408][ T5145] loop0: detected capacity change from 0 to 40427 [ 100.877291][ T5145] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 100.879422][ T5145] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 100.884421][ T5145] F2FS-fs (loop0): invalid crc value [ 100.953357][ T5145] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.966957][ T5152] loop3: detected capacity change from 0 to 32768 [ 100.978030][ T5145] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 100.979998][ T5145] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.993980][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 101.057103][ T5152] Dev loop3 SGI disklabel: csum bad, label corrupted [ 101.236130][ T3590] Dev loop3 SGI disklabel: csum bad, label corrupted [ 102.390447][ T4006] attempt to access beyond end of device [ 102.390447][ T4006] loop0: rw=2049, want=45104, limit=40427 [ 102.601059][ T5167] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.750402][ T5171] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 102.899687][ T26] audit: type=1326 audit(102.870:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b5c20e8 code=0x7ffc0000 [ 102.918345][ T26] audit: type=1326 audit(102.870:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8b5c20e8 code=0x7ffc0000 [ 102.940944][ T26] audit: type=1326 audit(102.870:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b5c20e8 code=0x7ffc0000 [ 102.970164][ T26] audit: type=1326 audit(102.870:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff8b5c20e8 code=0x7ffc0000 [ 102.987480][ T26] audit: type=1326 audit(102.880:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b5c20e8 code=0x7ffc0000 [ 103.012646][ T26] audit: type=1326 audit(102.930:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5181 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b5c20e8 code=0x0 [ 104.210621][ T5193] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 104.442794][ T5214] netlink: 12436 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.529309][ T5223] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 104.539767][ T5221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 104.542827][ T5221] IPv6: NLM_F_CREATE should be set when creating new route [ 104.546497][ T5216] dccp_close: ABORT with 60 bytes unread [ 104.598641][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.608584][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.615208][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.617228][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.618971][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.620858][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.622896][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.631420][ T5230] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.645450][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.650319][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.661725][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.663759][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.665653][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.667442][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.689848][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.691878][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.694515][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.696429][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.698331][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.712221][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.715932][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.718981][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.722249][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.722291][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.722309][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.722326][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.722343][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.722359][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.722376][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.722393][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.722410][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.780156][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.792826][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.795907][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.797773][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.799655][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.801509][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.825493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 104.844192][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.846223][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.848126][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.849966][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.851886][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.877369][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.879232][ T13] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 104.908352][ T13] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 105.973703][ T26] audit: type=1326 audit(105.950:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5247 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb74080e8 code=0x7fc00000 [ 105.993698][ T26] audit: type=1326 audit(105.960:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5247 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb74080e8 code=0x7fc00000 [ 106.008809][ T26] audit: type=1326 audit(105.960:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5247 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb74080e8 code=0x7fc00000 [ 106.030170][ T5256] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.034518][ T26] audit: type=1326 audit(105.960:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5247 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb74080e8 code=0x7fc00000 [ 106.219211][ T5273] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.246579][ T5271] loop0: detected capacity change from 0 to 256 [ 106.294231][ T5265] ebtables: ebtables: counters copy to user failed while replacing table [ 106.399741][ T5281] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.423586][ T4052] Bluetooth: hci3: command 0x0405 tx timeout [ 106.480139][ T5285] udc-core: couldn't find an available UDC or it's busy [ 106.482114][ T5285] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 106.553821][ T5290] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.580152][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 106.582165][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 106.583993][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 106.585695][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 106.587493][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 106.589298][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 106.591085][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 106.592676][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 106.594546][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 106.596219][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 106.597939][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 106.599554][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 106.601145][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 106.602568][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 106.604373][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 106.606222][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 106.607940][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 106.609666][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 106.611306][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 106.612949][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 106.614755][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 106.616418][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 106.618087][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 106.619764][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 106.621431][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 106.623189][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 106.625021][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 106.626725][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 106.628426][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 106.630145][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 106.631862][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 106.633617][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 106.635321][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 106.637360][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 106.639520][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 106.641456][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 106.643514][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 106.645613][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 106.647576][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 106.649652][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 106.651949][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 106.654049][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 106.656086][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 106.657933][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 106.660064][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 106.662050][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 106.664225][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 106.665798][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 106.667100][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 106.668360][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 106.669647][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 106.671662][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 106.673789][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 106.675847][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 106.677993][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 106.680000][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 106.682120][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 106.684214][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 106.686267][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 106.688261][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 106.690410][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 106.692452][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 106.694618][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 106.696599][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 106.909469][ T5299] udc-core: couldn't find an available UDC or it's busy [ 106.911319][ T5299] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 108.291116][ T5309] ALSA: mixer_oss: invalid OSS volume '' [ 108.492460][ T5324] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 108.871318][ T5342] udc-core: couldn't find an available UDC or it's busy [ 108.873275][ T5342] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 109.631343][ T5362] loop2: detected capacity change from 0 to 2048 [ 109.663413][ T5362] EXT4-fs (loop2): cluster size (2048) smaller than block size (4096) [ 109.736739][ T5369] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.841666][ T5383] syz-executor.3 (5383): attempted to duplicate a private mapping with mremap. This is not supported. [ 110.039289][ T5396] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.068278][ T5400] udc-core: couldn't find an available UDC or it's busy [ 110.078076][ T5400] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 110.197057][ T5404] device batadv0 entered promiscuous mode [ 110.199141][ T5404] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 110.202587][ T5404] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 110.569620][ T5426] loop2: detected capacity change from 0 to 512 [ 110.575193][ T5426] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.578872][ T5426] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.545111][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 111.545127][ T26] audit: type=1326 audit(110.800:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5416 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b5c20e8 code=0x0 [ 111.629349][ T5426] EXT4-fs (loop2): 1 truncate cleaned up [ 111.630925][ T5426] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 111.848756][ T5441] loop0: detected capacity change from 0 to 256 [ 111.880896][ T5444] loop4: detected capacity change from 0 to 128 [ 111.884343][ T5441] exfat: Deprecated parameter 'utf8' [ 111.884378][ T5441] exfat: Bad value for 'errors' [ 113.037671][ T5431] loop3: detected capacity change from 0 to 32768 [ 113.085072][ T5431] XFS: noikeep mount option is deprecated. [ 113.102787][ T26] audit: type=1326 audit(113.070:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 113.115130][ T26] audit: type=1326 audit(113.090:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 113.120977][ T26] audit: type=1326 audit(113.090:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 113.159463][ T26] audit: type=1326 audit(113.090:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 113.176157][ T26] audit: type=1326 audit(113.090:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 113.197409][ T26] audit: type=1326 audit(113.090:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 113.947075][ T13] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 114.072380][ T26] audit: type=1326 audit(113.090:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5455 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 114.078995][ T13] Bluetooth: hci2: Injecting HCI hardware error event [ 114.082534][ T3997] Bluetooth: hci2: hardware error 0x00 [ 114.098614][ T5431] XFS (loop3): Mounting V5 Filesystem [ 114.110132][ T5470] loop4: detected capacity change from 0 to 256 [ 114.144572][ T5470] exfat: Deprecated parameter 'utf8' [ 114.146044][ T5470] exfat: Bad value for 'errors' [ 114.156445][ T5474] loop0: detected capacity change from 0 to 256 [ 114.220224][ T5476] loop2: detected capacity change from 0 to 1024 [ 114.344232][ T5474] exfat: Deprecated parameter 'utf8' [ 114.345852][ T5474] exfat: Bad value for 'errors' [ 115.350371][ T5431] XFS (loop3): Ending clean mount [ 115.379872][ T5431] XFS (loop3): Quotacheck needed: Please wait. [ 115.498492][ T4124] hfsplus: b-tree write err: -5, ino 4 [ 115.502720][ T5431] XFS (loop3): Quotacheck: Done. [ 115.517399][ T4000] XFS (loop3): Unmounting Filesystem [ 116.492812][ T5485] udc-core: couldn't find an available UDC or it's busy [ 116.500097][ T5485] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 116.535450][ T5489] loop2: detected capacity change from 0 to 256 [ 116.544294][ T5489] exfat: Deprecated parameter 'utf8' [ 116.545807][ T5489] exfat: Bad value for 'errors' [ 117.928305][ T5501] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 117.930784][ T5501] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 119.462871][ T5516] udc-core: couldn't find an available UDC or it's busy [ 119.467985][ T5516] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 119.580332][ T5520] loop0: detected capacity change from 0 to 256 [ 119.633684][ T5520] exfat: Deprecated parameter 'utf8' [ 119.635028][ T5520] exfat: Bad value for 'errors' [ 119.875682][ T5529] loop3: detected capacity change from 0 to 256 [ 120.849534][ T5529] exfat: Deprecated parameter 'utf8' [ 120.850904][ T5529] exfat: Bad value for 'errors' [ 122.594667][ T5543] loop4: detected capacity change from 0 to 512 [ 123.172225][ T5548] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 123.185440][ T5550] udc-core: couldn't find an available UDC or it's busy [ 123.203827][ T5543] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.207310][ T5550] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 123.219636][ T5542] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #2: comm syz-executor.4: corrupted inode contents [ 123.226729][ T5542] EXT4-fs error (device loop4): ext4_dirty_inode:5993: inode #2: comm syz-executor.4: mark_inode_dirty error [ 123.230383][ T5542] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #2: comm syz-executor.4: corrupted inode contents [ 123.234425][ T5542] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz-executor.4: mark_inode_dirty error [ 123.419640][ T5558] loop2: detected capacity change from 0 to 512 [ 123.485193][ T5558] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 256 (level 2) [ 123.492752][ T5558] EXT4-fs (loop2): 2 truncates cleaned up [ 123.494472][ T5558] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 123.553355][ T5561] loop4: detected capacity change from 0 to 256 [ 123.606106][ T5561] exfat: Deprecated parameter 'utf8' [ 123.607530][ T5561] exfat: Bad value for 'errors' [ 123.724443][ T5566] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.284009][ T5554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.297795][ T5568] loop3: detected capacity change from 0 to 4096 [ 125.370196][ T5568] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 125.514975][ T5578] loop4: detected capacity change from 0 to 256 [ 125.564409][ T5578] exfat: Deprecated parameter 'utf8' [ 125.565850][ T5578] exfat: Bad value for 'errors' [ 127.028755][ T5592] udc-core: couldn't find an available UDC or it's busy [ 127.030596][ T5592] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 127.033267][ T5592] udc-core: couldn't find an available UDC or it's busy [ 127.047782][ T5592] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 127.179911][ T5610] loop3: detected capacity change from 0 to 256 [ 127.182478][ T5610] exfat: Deprecated parameter 'utf8' [ 127.183976][ T5610] exfat: Bad value for 'errors' [ 129.186739][ T5617] loop4: detected capacity change from 0 to 256 [ 129.228412][ T5617] exfat: Deprecated parameter 'utf8' [ 129.229819][ T5617] exfat: Bad value for 'errors' [ 131.249587][ T2048] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.383979][ T2048] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.770932][ T5644] loop2: detected capacity change from 0 to 256 [ 131.826083][ T5644] exfat: Deprecated parameter 'utf8' [ 131.827556][ T5644] exfat: Bad value for 'errors' [ 133.485704][ T5671] loop2: detected capacity change from 0 to 256 [ 133.541291][ T5671] FAT-fs (loop2): Directory bread(block 64) failed [ 133.543111][ T5671] FAT-fs (loop2): Directory bread(block 65) failed [ 133.613824][ T5671] FAT-fs (loop2): Directory bread(block 66) failed [ 133.615748][ T5671] FAT-fs (loop2): Directory bread(block 67) failed [ 133.617556][ T5671] FAT-fs (loop2): Directory bread(block 68) failed [ 133.619369][ T5671] FAT-fs (loop2): Directory bread(block 69) failed [ 133.621124][ T5671] FAT-fs (loop2): Directory bread(block 70) failed [ 133.622844][ T5671] FAT-fs (loop2): Directory bread(block 71) failed [ 133.667046][ T5671] FAT-fs (loop2): Directory bread(block 72) failed [ 133.668912][ T5671] FAT-fs (loop2): Directory bread(block 73) failed [ 135.313552][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 135.996279][ T5657] loop4: detected capacity change from 0 to 32768 [ 136.842399][ T5693] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.896369][ T5695] loop0: detected capacity change from 0 to 256 [ 137.221965][ T5705] loop3: detected capacity change from 0 to 512 [ 139.468871][ T5715] loop0: detected capacity change from 0 to 128 [ 139.528277][ T5715] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.590116][ T5720] loop2: detected capacity change from 0 to 512 [ 139.713895][ T5720] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.718761][ T5727] loop0: detected capacity change from 0 to 512 [ 139.779253][ T5730] loop3: detected capacity change from 0 to 512 [ 139.841237][ T5720] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 139.861879][ T5720] Quota error (device loop2): write_blk: dquota write failed [ 139.873322][ T5720] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 139.894419][ T5727] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,nobarrier,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 139.924967][ T5720] Quota error (device loop2): write_blk: dquota write failed [ 139.927265][ T5720] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 139.929915][ T5720] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz-executor.2: Failed to acquire dquot type 1 [ 139.940397][ T5730] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 139.988768][ T5720] EXT4-fs (loop2): 1 truncate cleaned up [ 140.002761][ T5720] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,noblock_validity,max_dir_size_kb=0x000000000181fffc,barrier=0x0000000000000003,journal_ioprio=0x0000000000000007,discard,nobarrier,dioread_nolock,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 143.275218][ T5768] loop2: detected capacity change from 0 to 256 [ 143.331051][ T5768] FAT-fs (loop2): Directory bread(block 64) failed [ 143.339964][ T5768] FAT-fs (loop2): Directory bread(block 65) failed [ 143.348643][ T5768] FAT-fs (loop2): Directory bread(block 66) failed [ 143.359424][ T5768] FAT-fs (loop2): Directory bread(block 67) failed [ 143.368332][ T5768] FAT-fs (loop2): Directory bread(block 68) failed [ 143.370151][ T26] audit: type=1326 audit(143.340:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 143.388111][ T5768] FAT-fs (loop2): Directory bread(block 69) failed [ 143.392378][ T5768] FAT-fs (loop2): Directory bread(block 70) failed [ 143.401842][ T26] audit: type=1326 audit(143.370:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=437 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 143.411510][ T26] audit: type=1326 audit(143.370:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 143.424062][ T5768] FAT-fs (loop2): Directory bread(block 71) failed [ 143.426944][ T5768] FAT-fs (loop2): Directory bread(block 72) failed [ 143.426990][ T5774] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 143.428615][ T5768] FAT-fs (loop2): Directory bread(block 73) failed [ 143.548993][ T148] attempt to access beyond end of device [ 143.548993][ T148] loop2: rw=1, want=1804, limit=256 [ 144.717547][ T5789] loop0: detected capacity change from 0 to 2048 [ 146.273057][ T5789] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.799267][ T6005] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 153.604066][ T6008] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 153.707859][ T6014] udc-core: couldn't find an available UDC or it's busy [ 153.709798][ T6014] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 153.738932][ T6016] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.255132][ T6045] process 'syz-executor.0' launched 'éq‰Y’3aK' with NULL argv: empty string added [ 155.436771][ T6015] loop4: detected capacity change from 0 to 40427 [ 155.489150][ T6015] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 155.491235][ T6015] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 155.541235][ T6015] F2FS-fs (loop4): Found nat_bits in checkpoint [ 155.643263][ T6015] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 155.746795][ T6015] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 156.623812][ T6093] binder: 6091:6093 ioctl 8903 20000080 returned -22 [ 156.832730][ T6110] udc-core: couldn't find an available UDC or it's busy [ 156.842889][ T6110] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 157.958930][ T6123] loop3: detected capacity change from 0 to 4096 [ 158.047731][ T6126] serio: Serial port pts0 [ 158.420998][ T26] audit: type=1326 audit(158.390:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6122 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa49c70e8 code=0x0 [ 159.403794][ T6160] loop2: detected capacity change from 0 to 64 [ 160.501054][ T6169] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 161.946864][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 163.450722][ T6200] loop4: detected capacity change from 0 to 64 [ 163.650135][ T6198] loop2: detected capacity change from 0 to 40427 [ 163.688508][ T6198] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 163.695016][ T6198] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 163.701300][ T6198] F2FS-fs (loop2): invalid crc value [ 163.720558][ T6198] F2FS-fs (loop2): Found nat_bits in checkpoint [ 163.720586][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.759627][ T6198] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 163.761994][ T6198] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 164.494218][ T4041] Bluetooth: hci0: command 0x0406 tx timeout [ 164.496008][ T4041] Bluetooth: hci1: command 0x0406 tx timeout [ 164.497651][ T4041] Bluetooth: hci4: command 0x0406 tx timeout [ 164.510930][ T4559] attempt to access beyond end of device [ 164.510930][ T4559] loop2: rw=2049, want=45104, limit=40427 [ 164.637414][ T6222] loop3: detected capacity change from 0 to 512 [ 164.689652][ T6222] EXT4-fs (loop3): Ignoring removed nobh option [ 164.714926][ T6222] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 164.718286][ T6222] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 164.720960][ T6222] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 164.771829][ T6222] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 164.797246][ T6222] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.3: corrupted in-inode xattr [ 164.836285][ T6222] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 164.849091][ T6222] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.nouid32,nobh,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 164.899981][ T6222] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 164.903415][ T6222] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 164.913890][ T6222] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 164.933383][ T6222] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor.3: path /root/syzkaller-testdir1911523205/syzkaller.AKmGhg/119/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 165.122343][ T6233] udc-core: couldn't find an available UDC or it's busy [ 165.127965][ T6233] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 165.254830][ T6238] loop2: detected capacity change from 0 to 64 [ 165.559587][ T6246] loop2: detected capacity change from 0 to 128 [ 165.677753][ T6248] device bridge1 entered promiscuous mode [ 165.794156][ T6254] loop4: detected capacity change from 0 to 512 [ 165.827260][ T6254] EXT4-fs (loop4): Ignoring removed nobh option [ 166.718332][ T6254] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 166.721337][ T6254] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 166.762871][ T6254] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 167.208336][ T6254] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 167.211265][ T6254] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 167.218418][ T6254] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 167.225311][ T6264] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 171.353668][ T6254] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.nouid32,nobh,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 172.473648][ T26] audit: type=1326 audit(172.440:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 172.479923][ T26] audit: type=1326 audit(172.440:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 172.520519][ T26] audit: type=1326 audit(172.460:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 172.529788][ T26] audit: type=1326 audit(172.460:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 172.536034][ T26] audit: type=1326 audit(172.460:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 172.541355][ T26] audit: type=1326 audit(172.460:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 172.547059][ T26] audit: type=1326 audit(172.460:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 172.559915][ T26] audit: type=1326 audit(172.460:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 172.565829][ T26] audit: type=1326 audit(172.460:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 172.580516][ T26] audit: type=1326 audit(172.460:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 172.817560][ T6302] loop4: detected capacity change from 0 to 512 [ 173.772028][ T6302] EXT4-fs (loop4): Ignoring removed nobh option [ 173.849546][ T6302] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 173.854627][ T6302] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 173.868077][ T6302] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 173.999982][ T6313] loop0: detected capacity change from 0 to 64 [ 174.040874][ T6302] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 174.091478][ T6302] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.4: corrupted in-inode xattr [ 174.139081][ T6302] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 174.147512][ T6319] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 174.181602][ T6302] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.nouid32,nobh,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 174.421401][ T6302] EXT4-fs warning (device loop4): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 174.444954][ T6302] EXT4-fs warning (device loop4): dx_probe:880: Enable large directory feature to access it [ 174.454502][ T6302] EXT4-fs warning (device loop4): dx_probe:965: inode #2: comm syz-executor.4: Corrupt directory, running e2fsck is recommended [ 174.482075][ T6302] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor.4: path /root/syzkaller-testdir483242272/syzkaller.G70gDI/164/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 174.833348][ T6333] udc-core: couldn't find an available UDC or it's busy [ 174.883844][ T6333] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 175.220843][ T6346] bridge0: port 3(vlan2) entered blocking state [ 175.239132][ T6346] bridge0: port 3(vlan2) entered disabled state [ 175.253190][ T6346] device vlan2 entered promiscuous mode [ 175.257480][ T6346] bridge0: adding interface vlan2 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 175.578102][ T6343] loop4: detected capacity change from 0 to 32768 [ 176.552243][ T6343] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6343) [ 176.667679][ T6343] BTRFS info (device loop4): using crc32c (crc32c-generic) checksum algorithm [ 176.670211][ T6343] BTRFS info (device loop4): use zlib compression, level 3 [ 176.672000][ T6343] BTRFS info (device loop4): using free space tree [ 176.672590][ T6366] udc-core: couldn't find an available UDC or it's busy [ 176.675601][ T6366] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 176.681723][ T6343] BTRFS info (device loop4): has skinny extents [ 176.853136][ T6343] BTRFS info (device loop4): enabling ssd optimizations [ 176.955598][ T6393] loop3: detected capacity change from 0 to 512 [ 177.049232][ T6397] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 177.066641][ T6393] EXT4-fs (loop3): Ignoring removed nobh option [ 177.185003][ T6393] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 177.188178][ T6393] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 177.190815][ T6393] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 177.325029][ T6393] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 177.351101][ T6393] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.3: corrupted in-inode xattr [ 177.381582][ T6393] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 177.403072][ T6393] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.nouid32,nobh,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 177.583008][ T6393] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 177.601894][ T6393] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it [ 177.611207][ T6393] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz-executor.3: Corrupt directory, running e2fsck is recommended [ 177.623234][ T6393] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor.3: path /root/syzkaller-testdir1911523205/syzkaller.AKmGhg/132/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 177.637877][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.759668][ T6409] device macvtap0 entered promiscuous mode [ 177.772605][ T6409] device macvtap0 left promiscuous mode [ 177.868403][ T6408] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 177.891600][ T6408] team0: Port device netdevsim0 added [ 178.225277][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.246144][ T6436] loop0: detected capacity change from 0 to 512 [ 179.414014][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 179.414029][ T26] audit: type=1326 audit(179.380:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 179.426660][ T26] audit: type=1326 audit(179.380:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 180.690060][ T26] audit: type=1326 audit(179.380:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 180.697643][ T26] audit: type=1326 audit(179.380:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 180.703796][ T26] audit: type=1326 audit(179.380:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 180.709302][ T26] audit: type=1326 audit(179.380:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 180.733348][ T26] audit: type=1326 audit(179.380:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6443 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8316c0e8 code=0x7ffc0000 [ 180.754521][ T6436] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz-executor.0: casefold flag without casefold feature [ 180.758781][ T6436] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.0: missing EA_INODE flag [ 180.767857][ T6454] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 180.955377][ T6436] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz-executor.0: error while reading EA inode 2 err=-117 [ 180.967081][ T6436] EXT4-fs (loop0): 1 orphan inode deleted [ 181.755749][ T6436] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 182.132469][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.192248][ T6480] device macvtap0 entered promiscuous mode [ 182.222630][ T6480] device macvtap0 left promiscuous mode [ 182.312030][ T6485] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 182.783135][ T6470] loop4: detected capacity change from 0 to 32768 [ 182.907820][ T6470] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6470) [ 182.950057][ T6470] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 182.952570][ T6470] BTRFS info (device loop4): turning on flush-on-commit [ 182.967130][ T6470] BTRFS info (device loop4): turning off barriers [ 182.968972][ T6470] BTRFS info (device loop4): doing ref verification [ 182.970625][ T6470] BTRFS info (device loop4): force clearing of disk cache [ 182.995242][ T6512] udc-core: couldn't find an available UDC or it's busy [ 182.997213][ T6512] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 183.007645][ T6470] BTRFS info (device loop4): enabling disk space caching [ 183.009722][ T6470] BTRFS info (device loop4): turning on sync discard [ 183.011527][ T6470] BTRFS info (device loop4): using default commit interval 30s [ 183.029412][ T6470] BTRFS info (device loop4): disk space caching is enabled [ 183.031389][ T6470] BTRFS info (device loop4): has skinny extents [ 183.185860][ T6525] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 183.945104][ T6470] BTRFS info (device loop4): enabling ssd optimizations [ 183.956325][ T6470] BTRFS info (device loop4): clearing free space tree [ 183.958307][ T6470] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 183.961375][ T6470] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 184.461523][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.507139][ T6566] device macvtap0 entered promiscuous mode [ 184.509877][ T6566] device macvtap0 left promiscuous mode [ 184.790840][ T6568] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 184.947458][ T6568] team0: Port device netdevsim0 added [ 185.272449][ T5781] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.414307][ T5781] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.482738][ T5781] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.540619][ T5781] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.416923][ T6597] chnl_net:caif_netlink_parms(): no params data found [ 186.539297][ T6597] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.550345][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.593726][ T6597] device bridge_slave_0 entered promiscuous mode [ 186.677644][ T6597] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.679563][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.682392][ T6597] device bridge_slave_1 entered promiscuous mode [ 186.781986][ T6597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.806510][ T6597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.905672][ T6597] team0: Port device team_slave_0 added [ 186.920418][ T6597] team0: Port device team_slave_1 added [ 186.981491][ T6597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.983300][ T6597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.017469][ T6597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.062980][ T6597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.065727][ T6597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.072239][ T6597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.200467][ T6597] device hsr_slave_0 entered promiscuous mode [ 187.244094][ T6597] device hsr_slave_1 entered promiscuous mode [ 187.274219][ T6597] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.276214][ T6597] Cannot create hsr debugfs directory [ 187.326690][ T5781] team0: Port device wlan1 removed [ 187.360264][ T6618] loop0: detected capacity change from 0 to 32768 [ 187.420484][ T6618] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6618) [ 187.439757][ T6618] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 187.442023][ T6618] BTRFS info (device loop0): use zlib compression, level 3 [ 187.454988][ T6618] BTRFS info (device loop0): using free space tree [ 187.456725][ T6618] BTRFS info (device loop0): has skinny extents [ 187.703639][ T4041] Bluetooth: hci0: command 0x0409 tx timeout [ 187.835009][ T6618] BTRFS info (device loop0): enabling ssd optimizations [ 188.475182][ T6597] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 188.545681][ T6597] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 188.590097][ T6597] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 188.628775][ T6597] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 188.833246][ T6597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.865169][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.867706][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.882760][ T6597] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.896397][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.899121][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.901677][ T4041] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.903712][ T4041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.941857][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.945841][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.960916][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.964588][ T4041] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.966426][ T4041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.968865][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.992255][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.128309][ T6675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.131787][ T6675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.136838][ T6675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.139868][ T6675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.142467][ T6675] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.168413][ T6675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.171039][ T6675] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.192081][ T6675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.206037][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.302756][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.594330][ T6675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.596538][ T6675] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.633913][ T6597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.656939][ T5781] device hsr_slave_0 left promiscuous mode [ 189.691771][ T5781] device hsr_slave_1 left promiscuous mode [ 189.773716][ T5781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.775762][ T5781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.781067][ T5781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.783123][ T5781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.786163][ T4041] Bluetooth: hci0: command 0x041b tx timeout [ 189.797819][ T5781] device bridge_slave_1 left promiscuous mode [ 189.799511][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.881559][ T5781] device bridge_slave_0 left promiscuous mode [ 189.883338][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.012785][ T5781] device veth1_macvtap left promiscuous mode [ 190.014520][ T5781] device veth0_macvtap left promiscuous mode [ 190.016184][ T5781] device veth1_vlan left promiscuous mode [ 190.017658][ T5781] device veth0_vlan left promiscuous mode [ 190.803150][ T5781] team0 (unregistering): Port device team_slave_1 removed [ 190.820971][ T5781] team0 (unregistering): Port device team_slave_0 removed [ 190.858097][ T5781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.913110][ T5781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.164852][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 191.222879][ T5781] bond0 (unregistering): Released all slaves [ 191.367338][ T6723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.415764][ T6723] device macvtap0 entered promiscuous mode [ 191.418210][ T6723] device macvtap0 left promiscuous mode [ 191.458247][ T6725] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 191.693271][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 191.696372][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.747159][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.749821][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.752601][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.764547][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.776222][ T6597] device veth0_vlan entered promiscuous mode [ 191.798683][ T6597] device veth1_vlan entered promiscuous mode [ 191.845476][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.847966][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.850688][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.864919][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.870223][ T6597] device veth0_macvtap entered promiscuous mode [ 191.874264][ T6674] Bluetooth: hci0: command 0x040f tx timeout [ 191.884949][ T6597] device veth1_macvtap entered promiscuous mode [ 191.927891][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.938580][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.947386][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.957149][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.966761][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.976625][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.986208][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.993411][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.008459][ T6597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.016624][ T6674] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.019585][ T6674] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.022330][ T6674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.034350][ T6674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.038826][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.051849][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.055618][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.058365][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.060825][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.084016][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.086525][ T6597] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.089204][ T6597] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.115581][ T6597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.120040][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.122924][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.139622][ T6597] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.141922][ T6597] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.157460][ T6597] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.159766][ T6597] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.319506][ T4124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.321756][ T4124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.328227][ T6671] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.392874][ T4108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.399515][ T4108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.419284][ T6674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.506173][ T2048] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.507907][ T2048] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.514472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 192.997259][ T6754] loop2: detected capacity change from 0 to 32768 [ 193.053911][ T6754] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6754) [ 193.102515][ T6754] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 193.105678][ T6754] BTRFS info (device loop2): use zlib compression, level 3 [ 193.107595][ T6754] BTRFS info (device loop2): using free space tree [ 193.109310][ T6754] BTRFS info (device loop2): has skinny extents [ 193.440110][ T6754] BTRFS info (device loop2): enabling ssd optimizations [ 193.944527][ T6674] Bluetooth: hci0: command 0x0419 tx timeout [ 194.584392][ T4041] Bluetooth: hci3: command 0x0406 tx timeout [ 194.829898][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 195.821794][ T6851] loop4: detected capacity change from 0 to 32768 [ 195.896271][ T6851] Dev loop4 SGI disklabel: csum bad, label corrupted [ 195.936819][ T3590] Dev loop4 SGI disklabel: csum bad, label corrupted [ 197.227560][ T6903] device team0 entered promiscuous mode [ 197.229059][ T6903] device team_slave_0 entered promiscuous mode [ 197.230864][ T6903] device team_slave_1 entered promiscuous mode [ 197.239013][ T6903] device netdevsim0 entered promiscuous mode [ 197.287356][ T6903] device team0 left promiscuous mode [ 197.288880][ T6903] device team_slave_0 left promiscuous mode [ 197.290790][ T6903] device team_slave_1 left promiscuous mode [ 197.292515][ T6903] device netdevsim0 left promiscuous mode [ 197.627987][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.314840][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.527706][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.700376][ T6988] udc-core: couldn't find an available UDC or it's busy [ 199.702480][ T6988] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 199.828176][ T6990] udc-core: couldn't find an available UDC or it's busy [ 199.829930][ T6990] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 200.128309][ T6992] udc-core: couldn't find an available UDC or it's busy [ 200.130132][ T6992] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 200.258143][ T6994] udc-core: couldn't find an available UDC or it's busy [ 200.260032][ T6994] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 200.381968][ T6998] udc-core: couldn't find an available UDC or it's busy [ 200.407643][ T6998] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 200.981596][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.997728][ T7030] device gretap0 entered promiscuous mode [ 202.046485][ T7062] ================================================================== [ 202.048920][ T7062] BUG: KASAN: slab-out-of-bounds in cfg80211_wext_freq+0x170/0x1ac [ 202.050966][ T7062] Read of size 2 at addr ffff0000e4a8e940 by task syz-executor.4/7062 [ 202.053081][ T7062] [ 202.053805][ T7062] CPU: 0 PID: 7062 Comm: syz-executor.4 Not tainted 5.15.161-syzkaller #0 [ 202.056190][ T7062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 202.058885][ T7062] Call trace: [ 202.059725][ T7062] dump_backtrace+0x0/0x530 [ 202.060947][ T7062] show_stack+0x2c/0x3c [ 202.062195][ T7062] dump_stack_lvl+0x108/0x170 [ 202.063349][ T7062] print_address_description+0x7c/0x3f0 [ 202.064843][ T7062] kasan_report+0x174/0x1e4 [ 202.066130][ T7062] __asan_report_load2_noabort+0x44/0x50 [ 202.067663][ T7062] cfg80211_wext_freq+0x170/0x1ac [ 202.069027][ T7062] cfg80211_wext_siwscan+0x45c/0xe0c [ 202.070498][ T7062] ioctl_standard_iw_point+0x82c/0xe24 [ 202.071995][ T7062] ioctl_standard_call+0xcc/0x264 [ 202.073376][ T7062] wext_ioctl_dispatch+0x16c/0x3ec [ 202.074725][ T7062] wext_handle_ioctl+0x224/0x448 [ 202.076108][ T7062] sock_ioctl+0x140/0x8ac [ 202.077357][ T7062] __arm64_sys_ioctl+0x14c/0x1c8 [ 202.078677][ T7062] invoke_syscall+0x98/0x2b8 [ 202.079876][ T7062] el0_svc_common+0x138/0x258 [ 202.081073][ T7062] do_el0_svc+0x58/0x14c [ 202.082177][ T7062] el0_svc+0x7c/0x1f0 [ 202.083223][ T7062] el0t_64_sync_handler+0x84/0xe4 [ 202.084589][ T7062] el0t_64_sync+0x1a0/0x1a4 [ 202.085803][ T7062] [ 202.086383][ T7062] Allocated by task 7062: [ 202.087561][ T7062] ____kasan_kmalloc+0xbc/0xfc [ 202.088842][ T7062] __kasan_kmalloc+0x10/0x1c [ 202.089965][ T7062] __kmalloc+0x29c/0x4c8 [ 202.091132][ T7062] ioctl_standard_iw_point+0x3b8/0xe24 [ 202.092504][ T7062] ioctl_standard_call+0xcc/0x264 [ 202.093811][ T7062] wext_ioctl_dispatch+0x16c/0x3ec [ 202.095126][ T7062] wext_handle_ioctl+0x224/0x448 [ 202.096458][ T7062] sock_ioctl+0x140/0x8ac [ 202.097646][ T7062] __arm64_sys_ioctl+0x14c/0x1c8 [ 202.098989][ T7062] invoke_syscall+0x98/0x2b8 [ 202.100155][ T7062] el0_svc_common+0x138/0x258 [ 202.101458][ T7062] do_el0_svc+0x58/0x14c [ 202.102689][ T7062] el0_svc+0x7c/0x1f0 [ 202.103864][ T7062] el0t_64_sync_handler+0x84/0xe4 [ 202.105179][ T7062] el0t_64_sync+0x1a0/0x1a4 [ 202.106432][ T7062] [ 202.107052][ T7062] The buggy address belongs to the object at ffff0000e4a8e800 [ 202.107052][ T7062] which belongs to the cache kmalloc-512 of size 512 [ 202.110934][ T7062] The buggy address is located 320 bytes inside of [ 202.110934][ T7062] 512-byte region [ffff0000e4a8e800, ffff0000e4a8ea00) [ 202.114528][ T7062] The buggy address belongs to the page: [ 202.116136][ T7062] page:0000000040fbf284 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x124a8c [ 202.119168][ T7062] head:0000000040fbf284 order:2 compound_mapcount:0 compound_pincount:0 [ 202.121497][ T7062] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 202.123712][ T7062] raw: 05ffc00000010200 fffffc000323a800 0000000200000002 ffff0000c0002600 [ 202.125997][ T7062] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 202.128257][ T7062] page dumped because: kasan: bad access detected [ 202.129991][ T7062] [ 202.130664][ T7062] Memory state around the buggy address: [ 202.132402][ T7062] ffff0000e4a8e800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 202.134715][ T7062] ffff0000e4a8e880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 202.136930][ T7062] >ffff0000e4a8e900: 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc fc [ 202.139099][ T7062] ^ [ 202.140760][ T7062] ffff0000e4a8e980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 202.143093][ T7062] ffff0000e4a8ea00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 202.145319][ T7062] ================================================================== [ 202.147545][ T7062] Disabling lock debugging due to kernel taint 1970/01/01 00:03:22 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 202.210819][ T7062] ================================================================================ [ 202.245299][ T7062] UBSAN: array-index-out-of-bounds in net/wireless/scan.c:2829:8 [ 202.247416][ T7062] index 33 is out of range for type 'struct iw_freq[32]' [ 202.249235][ T7062] CPU: 0 PID: 7062 Comm: syz-executor.4 Tainted: G B 5.15.161-syzkaller #0 [ 202.251706][ T7062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 202.254285][ T7062] Call trace: [ 202.255154][ T7062] dump_backtrace+0x0/0x530 [ 202.256364][ T7062] show_stack+0x2c/0x3c [ 202.257195][ T7062] dump_stack_lvl+0x108/0x170 [ 202.258430][ T7062] dump_stack+0x1c/0x58 [ 202.259503][ T7062] __ubsan_handle_out_of_bounds+0x108/0x15c [ 202.261086][ T7062] cfg80211_wext_siwscan+0x4cc/0xe0c [ 202.262486][ T7062] ioctl_standard_iw_point+0x82c/0xe24 [ 202.263884][ T7062] ioctl_standard_call+0xcc/0x264 [ 202.265197][ T7062] wext_ioctl_dispatch+0x16c/0x3ec [ 202.266643][ T7062] wext_handle_ioctl+0x224/0x448 [ 202.267945][ T7062] sock_ioctl+0x140/0x8ac [ 202.269124][ T7062] __arm64_sys_ioctl+0x14c/0x1c8 [ 202.270431][ T7062] invoke_syscall+0x98/0x2b8 [ 202.271602][ T7062] el0_svc_common+0x138/0x258 [ 202.272847][ T7062] do_el0_svc+0x58/0x14c [ 202.274021][ T7062] el0_svc+0x7c/0x1f0 [ 202.275035][ T7062] el0t_64_sync_handler+0x84/0xe4 [ 202.276339][ T7062] el0t_64_sync+0x1a0/0x1a4 [ 202.299101][ T7062] ================================================================================